This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json) Hash identifier: NcGYUbTd47ftUsKMBDwgCGUA3xFl7nIGGzPt5UUwbP4= Subject key identifier: CD:A9:32:22:97:AF:F7:66:46:99:1A:E6:9D:C6:17:3B:59:DB:FA:E0 Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09 Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709 Certificate serial: 019B51BD364975D9C9DA789450A13F00AF53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 19:01:53 +0000 Manifest this update: Wed 24 Dec 2025 19:01:53 +0000 Manifest next update: Thu 25 Dec 2025 19:01:53 +0000 Files and hashes: 1: Ej6AGqgrDcCEmdxGQ51_3en2bK0.roa (hash: iJ7FETE7qwjnaLdIl0yVteeRiSysQ9U3gczbrqrkwXU=) 2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: zATV5noipcBj8qcNcoT9Vjw90FAHb3VJcdQVhK55bTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:36:49:75:d9:c9:da:78:94:50:a1:3f:00:af:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709 Validity Not Before: Dec 24 19:01:53 2025 GMT Not After : Dec 25 19:01:53 2025 GMT Subject: CN=cda9322297aff76646991ae69dc6173b59dbfae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:57:67:e9:57:2a:3b:46:da:63:5c:4f:87: ba:3c:84:23:4e:c8:2e:46:6b:a5:e7:45:32:83:0b: 64:f1:b8:8d:20:4d:b5:63:65:6d:6a:da:30:2b:67: 10:c8:ea:8e:7c:0a:eb:72:9b:d8:56:a8:37:11:12: 63:8c:1f:6c:dd:16:a2:cc:a8:25:1c:55:ad:4a:9b: 07:2f:81:c9:05:0c:1d:3c:aa:99:92:aa:d7:c3:fd: 9d:7b:28:14:5d:fb:09:49:35:7c:a8:af:07:7a:77: a1:b2:7c:82:f2:4c:7a:d6:90:dc:3a:d0:48:f8:10: 61:66:00:c5:c2:fc:de:67:11:7d:5e:40:c2:fa:c5: eb:72:39:97:e3:e1:e9:14:53:b5:9c:4c:63:d7:5b: 11:e6:af:6c:b2:25:89:6d:98:23:bc:d2:80:d0:f6: 2a:ab:d4:d0:4c:64:a1:0f:a9:ce:e1:5b:ad:6c:d2: 7a:b5:45:d5:9a:fd:44:e4:6f:f7:33:1a:d6:f2:d2: 12:2c:6b:da:be:d2:ad:54:11:d0:41:2e:33:4f:ec: 47:3d:fb:48:d5:74:d8:82:c2:9f:8b:4d:e4:86:e8: a5:e9:75:5e:47:54:24:4a:a1:bd:9d:24:7a:c1:92: 5b:e0:43:fc:d6:c8:16:cf:e8:52:e2:82:45:09:1e: d4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A9:32:22:97:AF:F7:66:46:99:1A:E6:9D:C6:17:3B:59:DB:FA:E0 X509v3 Authority Key Identifier: keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a6:ea:3a:04:70:08:b9:ed:12:b6:bb:e8:53:87:9f:8e:02: c5:56:37:3f:0f:23:6d:62:38:3b:24:5b:4a:20:39:08:12:18: e9:35:b2:f9:df:7b:97:24:60:6c:35:ed:99:0c:80:17:c0:67: 40:c6:97:ca:b3:b8:19:e9:9a:d4:15:f6:b5:78:cb:c3:d3:40: da:d1:f7:4e:b8:83:9f:82:9b:e6:cf:f5:cf:7c:35:00:84:91: d8:4e:30:68:c1:5b:a5:81:7a:53:2c:ac:8d:d6:92:5e:66:22: 12:1f:25:09:2f:9f:2e:ff:d2:08:b8:ad:1a:b3:fc:79:af:77: dc:fe:d5:ab:db:81:c5:6a:f9:3c:ab:55:99:2e:9b:d5:8a:e7: 4f:cb:66:f5:c4:fa:1a:a2:64:c9:c1:40:5e:37:3c:2b:3a:33: 26:15:e5:20:95:d1:43:c3:04:3a:85:05:24:ec:76:82:56:d2: b0:69:bf:03:15:e1:fe:fb:89:2f:07:83:f6:45:a2:5f:97:da: e7:cc:d9:30:07:64:e6:f0:f5:f7:04:f8:3c:da:5a:4c:cc:83: 45:81:71:fa:65:73:51:5e:fd:bb:6e:8f:ad:0a:a7:f7:28:37: f6:e1:33:e8:eb:71:6a:b9:27:ae:17:48:22:b6:0f:e4:93:95: 9c:35:c0:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvTZJddnJ2niUUKE/AK9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYWJmMzNiMGIzODA4ODhmZTFlM2I4MGVkYTQ4YjE3ODFi Yjc3MDkwHhcNMjUxMjI0MTkwMTUzWhcNMjUxMjI1MTkwMTUzWjAzMTEwLwYDVQQD EyhjZGE5MzIyMjk3YWZmNzY2NDY5OTFhZTY5ZGM2MTczYjU5ZGJmYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mdXZ+lXKjtG2mNcT4e6PIQjTsgu Rmul50Uygwtk8biNIE21Y2VtatowK2cQyOqOfArrcpvYVqg3ERJjjB9s3RaizKgl HFWtSpsHL4HJBQwdPKqZkqrXw/2deygUXfsJSTV8qK8HenehsnyC8kx61pDcOtBI +BBhZgDFwvzeZxF9XkDC+sXrcjmX4+HpFFO1nExj11sR5q9ssiWJbZgjvNKA0PYq q9TQTGShD6nO4VutbNJ6tUXVmv1E5G/3MxrW8tISLGvavtKtVBHQQS4zT+xHPftI 1XTYgsKfi03khuil6XVeR1QkSqG9nSR6wZJb4EP81sgWz+hS4oJFCR7UZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2pMiKXr/dmRpka5p3GFztZ2/rgMB8GA1UdIwQY MBaAFEyr8zsLOAiI/h47gO2kixeBu3cJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xODVhNDItY2I3Zi00MDU4LTg2ZjUt NDFhZTVmNGE1MDU1LzEvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xODVhNDItY2I3Zi00MDU4LTg2ZjUtNDFhZTVmNGE1MDU1 LzEvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqbqOgRw CLntEra76FOHn44CxVY3Pw8jbWI4OyRbSiA5CBIY6TWy+d97lyRgbDXtmQyAF8Bn QMaXyrO4Gema1BX2tXjLw9NA2tH3TriDn4Kb5s/1z3w1AISR2E4waMFbpYF6Uyys jdaSXmYiEh8lCS+fLv/SCLitGrP8ea933P7Vq9uBxWr5PKtVmS6b1YrnT8tm9cT6 GqJkycFAXjc8KzozJhXlIJXRQ8MEOoUFJOx2glbSsGm/AxXh/vuJLweD9kWiX5fa 58zZMAdk5vD19wT4PNpaTMyDRYFx+mVzUV79u26PrQqn9yg39uEz6OtxarknrhdI IrYP5JOVnDXA/g== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:30 2025 by rpki-client